Fetch sanitized results with a one-time token
POST/results/fetch
Fetch full sanitized evaluation results using the result_token
returned by POST /evaluate. The token is sent in the request body
(not the URL) so it never lands in server, proxy, or browser-history
access logs. Like every authenticated endpoint, this call still carries
the Bearer key and X-FB-Signature.
Tokens are short-lived (15 min), single-use, and bound to a
specific evaluation_id. If the backing evaluation is not yet
complete the response returns { ok: true, data: { status: "processing" } }; partners
should fall back to GET /evaluations/{id} for polling.
The token is consumed only when complete results are returned. A call made
while the evaluation is still processing does not burn the token — you can
safely retry POST /results/fetch until results are ready. Once a call returns
the full results, the token is spent and any further use returns 401. Recommended
flow: poll GET /evaluations/{id} until status is complete, then call
POST /results/fetch exactly once to retrieve the sanitized results.
Request
Responses
- 200
- 400
- 401
- 404
- 422
Final results or interim status.
Malformed token.
Token expired, already used, or signature mismatch.
Referenced evaluation has been deleted.
Request body failed schema validation (missing/!wrong-typed fields).
Returned in the standard public envelope; the field-level errors are
preserved under detail (FastAPI's validation error list).